Traffic Trace Info
DumpFile: 201112131400.dump
FileSize: 4258.81MB
Id: 201112131400
StartTime: Tue Dec 13 14:00:01 2011
EndTime: Tue Dec 13 14:15:00 2011
TotalTime: 899.57 seconds
TotalCapSize: -783.98MB CapLen: 96 bytes
# of packets: 62046287 (32631.62MB)
AvgRate: 304.24Mbps stddev:61.86M
IP flow (unique src/dst pair) Information
# of flows: 11277935 (avg. 5.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.3% 0.9% 0.9% 0.8% 0.8% 0.8% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 8694898
Top 10 bandwidth usage (bytes/total in %):
20.8% 8.9% 7.4% 4.7% 4.1% 2.8% 2.6% 2.4% 2.3% 2.3%
# of IPv6 addresses: 4987
Top 10 bandwidth usage (bytes/total in %):
38.3% 15.1% 11.5% 11.5% 10.6% 10.4% 4.9% 4.9% 3.9% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201112131400.pktlen.png)
detailed numbers
[ 32- 63]: 23789168
[ 64- 127]: 14312411
[ 128- 255]: 1311634
[ 256- 511]: 882444
[ 512- 1023]: 934329
[ 1024- 2047]: 20816301
Protocol Breakdown
![[protocol breakdown chart]](201112131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 62046287 (100.00%) 34216729795 (100.00%) 551.47
ip 61647764 ( 99.36%) 34057894772 ( 99.54%) 552.46
tcp 41012877 ( 66.10%) 30536614023 ( 89.24%) 744.56
http(s) 18508398 ( 29.83%) 25258443073 ( 73.82%) 1364.70
http(c) 12696213 ( 20.46%) 2107982616 ( 6.16%) 166.03
squid 223557 ( 0.36%) 177650769 ( 0.52%) 794.66
smtp 86574 ( 0.14%) 38648777 ( 0.11%) 446.42
ftp 28854 ( 0.05%) 19044295 ( 0.06%) 660.02
pop3 5949 ( 0.01%) 2818720 ( 0.01%) 473.81
imap 2346 ( 0.00%) 295597 ( 0.00%) 126.00
telnet 34743 ( 0.06%) 2597360 ( 0.01%) 74.76
ssh 614509 ( 0.99%) 95081296 ( 0.28%) 154.73
dns 51889 ( 0.08%) 5897362 ( 0.02%) 113.65
bgp 713 ( 0.00%) 157410 ( 0.00%) 220.77
napster 251 ( 0.00%) 17705 ( 0.00%) 70.54
realaud 74 ( 0.00%) 4899 ( 0.00%) 66.20
rtsp 6393 ( 0.01%) 7702947 ( 0.02%) 1204.90
icecast 66585 ( 0.11%) 47860568 ( 0.14%) 718.79
hotline 114 ( 0.00%) 7624 ( 0.00%) 66.88
other 8685715 ( 14.00%) 2772403005 ( 8.10%) 319.19
udp 4251395 ( 6.85%) 1718744775 ( 5.02%) 404.28
dns 590513 ( 0.95%) 137565771 ( 0.40%) 232.96
realaud 6 ( 0.00%) 565 ( 0.00%) 94.17
halflif 13 ( 0.00%) 2550 ( 0.00%) 196.15
starcra 14 ( 0.00%) 1366 ( 0.00%) 97.57
everque 644 ( 0.00%) 119390 ( 0.00%) 185.39
unreal 90 ( 0.00%) 17511 ( 0.00%) 194.57
quake 12 ( 0.00%) 2047 ( 0.00%) 170.58
cuseeme 9 ( 0.00%) 1117 ( 0.00%) 124.11
other 3659980 ( 5.90%) 1580948766 ( 4.62%) 431.96
icmp 15299488 ( 24.66%) 994163608 ( 2.91%) 64.98
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3824 ( 0.01%) 1170544 ( 0.00%) 306.10
ip6 1066344 ( 1.72%) 802158671 ( 2.34%) 752.25
other 13652 ( 0.02%) 5023991 ( 0.01%) 368.00
frag 574 ( 0.00%) 601397 ( 0.00%) 1047.73
ip6 398523 ( 0.64%) 158835023 ( 0.46%) 398.56
tcp6 226131 ( 0.36%) 68069629 ( 0.20%) 301.02
http(s) 36895 ( 0.06%) 39000509 ( 0.11%) 1057.07
http(c) 54695 ( 0.09%) 4614322 ( 0.01%) 84.36
smtp 143 ( 0.00%) 56898 ( 0.00%) 397.89
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
pop3 59 ( 0.00%) 6126 ( 0.00%) 103.83
dns 383 ( 0.00%) 77821 ( 0.00%) 203.19
bgp 80 ( 0.00%) 13434 ( 0.00%) 167.93
other 133850 ( 0.22%) 24298206 ( 0.07%) 181.53
udp6 70682 ( 0.11%) 31929992 ( 0.09%) 451.74
dns 52756 ( 0.09%) 14396563 ( 0.04%) 272.89
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 4 ( 0.00%) 348 ( 0.00%) 87.00
unreal 1 ( 0.00%) 100 ( 0.00%) 100.00
other 17919 ( 0.03%) 17532763 ( 0.05%) 978.45
icmp6 23135 ( 0.04%) 3503621 ( 0.01%) 151.44
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 78461 ( 0.13%) 55316289 ( 0.16%) 705.02
tcpdump file: 201112131400.dump.gz (1439.45 MB)